Timeline
01/28/11:
- 22:44 Changeset [1929] by
- make sure we can insert huuuuge records
- 21:57 Changeset [1928] by
- reinstate 'recursor' handoff in auth server, issue spotted by Detlef …
- 21:40 Changeset [1927] by
- update pdnssec error message & documentation based on feedback by Leen …
- 21:37 PDNSSEC edited by
- (diff)
- 12:09 Changeset [1926] by
- Jan-Piet Mens discovered that we did not correctly fill out the 'auth' …
- 08:58 Changeset [1925] by
- silence zone2sql debugging output, fix up sqlite3 typo
- 08:50 Changeset [1924] by
- fix up 'too-big-for-udp' testcase. Protipp: increase the percentage of …
- 08:45 Changeset [1923] by
- this is a directory rename, and it does not look good
- 00:19 Changeset [1922] by
- the all new non-generic Oracle Backend, with full DNSSEC support! …
01/27/11:
- 23:20 Changeset [1921] by
- release notes for 3.0
- 16:37 Changeset [1920] by
- with this patch, PowerDNS works around a bug in the Botan GOST code. Post …
- 13:59 Changeset [1919] by
- further spiff up verify-crypto, now correctly processes samples from …
- 13:58 Changeset [1918] by
- teach ECDSA keys to import a public key from the binary DNSKEY value, plus …
- 13:57 Changeset [1917] by
- add supported algorithms & digest types
- 13:55 Changeset [1916] by
- add support for digest provisional codepoint 4, SHA384
- 11:31 Changeset [1915] by
- add signature verification infrastructure for RSA & GOST, test with …
- 10:35 Changeset [1914] by
- remove vestiges of RSA-centrism from the DNSKEY code - at assumed every …
01/26/11:
- 22:01 Changeset [1913] by
- finish up support for GOST, including DS with digest type=3, plus abstract …
- 17:04 Changeset [1912] by
- First part of the GOST support: R 34.10-2001, GOST R 34.11-94 will follow. …
- 01:12 Changeset [1911] by
- work in progress, but needed to complete the tar.gz build
- 01:08 Changeset [1910] by
- add Botan to our static builds
- 00:27 Changeset [1909] by
- this huge commit adds support for RSASHA512 & draft-ietf-dnsext-ecdsa …
01/25/11:
- 20:14 Changeset [1908] by
- massively speed up nsec/nsec3 rectification by wrapping the update …
- 20:13 Changeset [1907] by
- and generic sql too
- 20:08 Changeset [1906] by
- teach backends not to delete a zone if a negative zone-id is passed to …
- 08:51 Changeset [1905] by
- 'multi-algorithm support' - for now we still only do RSA, but the whole …
01/22/11:
- 19:21 Changeset [1904] by
- oops, missed this in the previous commit
- 19:21 Changeset [1903] by
- move code around in preparation for non-RSA keys & signatures
01/21/11:
- 13:49 Changeset [1902] by
- further fix up parsing hex strings with spaces in odd places (it rhymes!)
01/20/11:
- 22:26 Changeset [1901] by
- mutate nsecxcache into metacache, simplify cache handling while we are at …
01/19/11:
- 20:28 Changeset [1900] by
- work around apparent bug in 'dig' output of DS records. Dig likes to …
- 20:26 Changeset [1899] by
- fix up us putting the RRSIG in the wrong place for DS records. Spotted by …
- 20:21 Changeset [1898] by
- fix up some tabdamage
- 20:15 Changeset [1897] by
- sync the docs with pre-signing mode
01/18/11:
- 20:09 PDNSSEC edited by
- (diff)
- 20:01 Changeset [1896] by
- Jose Arthur Benetasso Villanova fixed a very old comment typo ;-)
- 20:01 Changeset [1895] by
- Jose Arthur Benetasso Villanova contributed the postgresql schema update …
- 16:33 Changeset [1894] by
- document (un)set-presigned
- 15:55 Changeset [1893] by
- implement 'pdnssec set-presigned', allowing PowerDNSSEC to serve …
- 13:58 Ticket #336 (field change_date does not work as expected) created by
- I am using pdns 2.9.21 with gpgsql backend I've set up serial = 0 in SOA …
- 09:43 Changeset [1892] by
- remove the signing code from dnspacket, where it was cute but wrong.
- 09:37 Changeset [1891] by
- add tools to compare pdns output to that of other servers
- 09:21 Changeset [1890] by
- move clone-zone into the pdnssec era
01/17/11:
- 21:04 Changeset [1889] by
- alternate rdtsc() implementation
01/15/11:
- 21:41 Changeset [1888] by
- massively speed up our NSEC3 AXFR code
- 12:26 Changeset [1887] by
- add support for NSEC3 zonetransfers!
- 12:24 Changeset [1886] by
- emitNSEC3 and getNSEC3Hashes are useful outside of the packethandler class …
- 12:23 Changeset [1885] by
- teach bindbackend about the possibility of empty nsec3 salts
01/14/11:
- 23:12 Changeset [1884] by
- implement 'pdnssec import-zone-key-pem' which is compatible with the …
- 14:14 Ticket #335 (pdnsd problem querying pdns authoritative only and external cnames) created by
- Hi, I have a problem configuring pdnsd proxy server querying a local only …
- 13:12 Changeset [1883] by
- fix up nsec3 hunt in BIND backend, problems spotted by Christoph Meerwald
- 13:10 Changeset [1882] by
- properly invalidate keycache on adding a new key - this removes the …
01/12/11:
- 21:19 Changeset [1881] by
- repeat after me.. no more rushed coding
- 20:27 Changeset [1880] by
- make packetcache further aware of difference between tcp and udp, so we …
- 19:26 Changeset [1879] by
- refuse to make keys of unknown algorithm instead of just complaining allow …
- 17:35 Changeset [1878] by
- oops, put the NSEC3NARROW item in the NSEC3PARAM cache
- 17:30 Changeset [1877] by
- don't interleave DNSBackend::lookup and ::getSOA! Plus don't add NSEC to …
01/11/11:
- 23:50 Changeset [1876] by
- add some logic to prevent us crashing on an nsec3 non-narrow zone with …
- 23:00 Changeset [1875] by
- messed up the 'narrow' detection from the db
- 22:45 Changeset [1874] by
- keycache would only serve expired records, and never renew expired …
- 22:42 Changeset [1873] by
- improve syntax checking for pdnssec
- 22:41 Changeset [1872] by
- make replacing_insert from syncres.hh useable for the rest of pdns
- 21:08 Changeset [1871] by
- restore NSEC generation & signatures for AXFR.
- 20:59 Changeset [1870] by
- implement simplistic 60 dnssec key cache
- 20:56 Changeset [1869] by
- make packetcache dnssec aware (different answers based on do)
- 20:52 Changeset [1868] by
- quiet query logging with log-dns-details, move query logging to place …
- 15:40 PDNSSEC edited by
- (diff)
- 15:39 Changeset [1867] by
- remainder of 3600-ectomy
- 15:14 Changeset [1866] by
- making the world safe for ttl!=3600 dnssec, one step at a time ;-)
- 14:44 Changeset [1865] by
- fix typo in bindbackend, add pdnssec hash-zone-record convenience function …
- 12:53 PDNSSEC edited by
- (diff)
- 12:19 WikiStart edited by
- (diff)
- 12:13 PDNSSEC edited by
- (diff)
- 11:26 PDNSSEC edited by
- (diff)
- 11:05 PDNSSEC edited by
- (diff)
- 11:01 PDNSSEC edited by
- (diff)
- 10:29 Changeset [1864] by
- oops - previous commit was uncompiled & thus broken
- 10:25 Changeset [1863] by
- silence a warning from the BIND backend, plus vamp up the auto-build …
- 10:21 PDNSSEC edited by
- (diff)
- 10:15 Changeset [1862] by
- slim down our tar.gz, taking out a .svn directory + outdated sgml
- 09:43 Changeset [1861] by
- update our internal tar.gz builder
- 09:43 Changeset [1860] by
- bye bye sgml, plus some updates to the xml
01/10/11:
- 15:41 PDNSSEC edited by
- (diff)
- 14:48 Changeset [1859] by
- hypermodern bulk slave engine forward ported from 2.9.22.x. Does 5000 …
- 14:45 Ticket #334 (Auto-splitting long TXT records doesn't work) created by
- If you enter a TXT record longer than 255 characters the record generates …
- 14:44 Changeset [1858] by
- remote master can now also have a :port number - forward port from …
- 14:42 Changeset [1857] by
- add multiple master support to gsqlbackends - forward port from 2.9.22.x
- 14:41 Changeset [1856] by
- make sure geobackend sets auth=1, which should always be true
- 12:50 Changeset [1855] by
- make sure that DNSKEY requests can be delegated don't do NSEC on …
- 12:14 Changeset [1854] by
- no longer try to add NSEC/NSEC3 to unsigned zones also don't add DNSSEC …
- 12:03 Changeset [1853] by
- more dnssec docs
- 11:06 Ticket #333 (Improvement for recursor wipe cache) created by
- This enables cleaning of names from packet cache as well. Also adds …
- 09:39 Changeset [1852] by
- add support for unsalted nsec3 hashes ('1 0 1 -')
- 08:51 Changeset [1851] by
- show-zone output partially went to stderr we can now roundtrip a zone via …
01/09/11:
- 22:05 Changeset [1850] by
- fix giant memory leak, silence debugging, improve error message about …
- 19:26 Changeset [1849] by
- index the signature cache on the hash of the public key instead of on the …
- 16:54 Changeset [1848] by
- move some non-'keeper' dnssec signing logic away to a separate file, …
- 11:40 Changeset [1847] by
- 3.0pre
- 11:39 PDNSSEC edited by
- (diff)
- 11:31 Changeset [1846] by
- remove more of boost dependency, fix up debian compilation
- 11:27 Changeset [1845] by
- remove boost filesystem dependency
- 10:06 Changeset [1844] by
- always sign DS records - bit of an oddity, we normally assume that all …
- 09:58 Changeset [1843] by
- * Make everything aware of multiple simultaneous signing keys * …
- 09:51 Changeset [1842] by
- silence some debugging output on ordering zone information
- 09:37 Changeset [1841] by
- fix up confusing message about starting up another distributor thread
- 07:13 Changeset [1840] by
- remove dependency on the boost_system libs, easing compilation on …
- 07:12 Changeset [1839] by
- move document generation structure fully over to xml docbook
01/08/11:
- 14:22 Changeset [1838] by
- moving to prettier docbook xml output
- 01:54 Changeset [1837] by
- make rest of powerdns RSASHA256 aware. Works too.
- 01:53 Changeset [1836] by
- unbase32hex speedup dereconversion broke everything, fixed now
- 00:57 Changeset [1835] by
- make dnsseckeeper & dnssecinfra code, plus pdnssec, aware of non-RSASHA1 …
- 00:24 Changeset [1834] by
- also emit DS for digest type 2 (SHA256) in pdnssec output
- 00:13 Changeset [1833] by
- make sure pipe backend for now gets the 'auth' field *mostly* right
01/07/11:
- 23:29 Changeset [1832] by
- make sure we don't send back an oversized packet after adding signatures
- 23:04 Changeset [1831] by
- <- idiot
- 21:34 Ticket #200 (pdns auth from svn sends truncated oversized responses for every query but ...) closed by
- fixed: fixed in commit 1830
- 21:33 Changeset [1830] by
- remove old 'guillotine' truncate functionality which should've been …
- 21:01 Changeset [1829] by
- remove one unneccessary layer of (un)base32hex transitions, spotted by Aki …
- 14:02 Changeset [1828] by
- don't truncate just before sending answer, plus improve logging a bit
- 11:32 Changeset [1827] by
- fix base32 padding issue as found by Aki Tuomi and solved by Michel Stol
01/06/11:
- 23:00 Changeset [1826] by
- add some operational doctrine, plus link to the wiki
- 22:23 Changeset [1825] by
- more documentation, plus add importing as zsk, ksk, plus adding a zsk or …
- 22:14 Changeset [1824] by
- make importing keys a bit more resilient against whitespace, plus fix up …
- 22:10 Changeset [1823] by
- oops, the --config-name fix broke setups w/o a config-name plus add …
- 22:00 Changeset [1822] by
- report (fatal) errors better
- 21:41 Changeset [1821] by
- more docs
- 20:09 Changeset [1820] by
- suggested by Maik Zumstrull, pdnssec needs --config-name to access virtual …
- 19:57 Changeset [1819] by
- make sure that we dnssec-rectify dnssec enabled zones that are slaved from …
- 17:00 PDNSSEC edited by
- (diff)
- 17:00 PDNSSEC edited by
- (diff)
- 16:58 Changeset [1818] by
- and like this?
- 16:56 Changeset [1817] by
- maybe this helps us build..
- 16:15 PDNSSEC edited by
- (diff)
- 15:58 PDNSSEC edited by
- (diff)
- 15:52 Changeset [1816] by
- make pdnssec output useful help rename order-zone to rectify-zone and make …
- 15:41 Changeset [1815] by
- make sqlite3 schema case insensitive, thanks to Peter van Dijk for telling …
- 15:18 PDNSSEC edited by
- (diff)
- 14:23 Changeset [1814] by
- disable AXFR for NSEC3 zones for now - we can do it for non-narrow mode, …
- 14:03 Changeset [1813] by
- spotted by Wouter Wijngaards, turns out we were incrementing/decrementing …
- 13:44 Changeset [1812] by
- make sure 'pdnssec' can see the ultra-vital 'random' backend too
- 13:38 Changeset [1811] by
- Thanks to Roy Arends, actually make nsec3-narrow work, enable with …
- 10:15 Changeset [1810] by
- implement 'narrow' NSEC3 generation w/o consulting the database ordering, …
- 10:13 Changeset [1809] by
- quiet some nsec3 debugging output
01/04/11:
- 23:00 Changeset [1808] by
- don't synthesise an NSEC for NSEC3 zones when queried directly for NSEC
- 22:22 PDNSSEC edited by
- (diff)
- 21:59 Changeset [1807] by
- On his birthday, José Arthur Benetasso Villanova gave us initial …
- 20:57 Changeset [1806] by
- when explicitly asking for an NSEC, we should not do a 'relative' pointer …
- 20:35 Changeset [1805] by
- our random may be random, but it is authoritative random!!
- 20:19 PDNSSEC edited by
- (diff)
- 19:52 PDNSSEC/details edited by
- (diff)
- 19:50 PDNSSEC/details edited by
- (diff)
- 19:44 PDNSSEC edited by
- (diff)
- 17:16 PDNSSEC edited by
- (diff)
- 16:11 PDNSSEC edited by
- (diff)
- 16:09 Changeset [1804] by
- PAY ATTENTION! from this commit onwards, generic backends will NOT perform …
- 13:19 Changeset [1803] by
- actually set the module-dir before we need it instead of after - spotted …
- 11:12 Changeset [1802] by
- teach pdnssec about config-dir
- 11:12 PDNSSEC edited by
- (diff)
- 11:06 PDNSSEC edited by
- (diff)
- 11:02 PDNSSEC edited by
- (diff)
- 10:31 PDNSSEC edited by
- (diff)
- 10:20 Changeset [1801] by
- make pdnssec (hopefully) support dynamically loaded modules too
- 10:03 Changeset [1800] by
- make dnssec queries configurable, patch by Stefan Schmidt. Will have to be …
01/03/11:
- 21:59 Changeset [1799] by
- also include DNSKEY on a case-insensitive match. Lowercase RRDATA …
- 21:11 Changeset [1798] by
- make sure we stuff in synthesised DNSKEYs for an ANY query - maybe this …
- 12:16 Changeset [1797] by
- used a non-existent database connection in tcp backend for signing (oops)
- 12:03 Changeset [1796] by
- enable hybrid gsqlite3/bind operation where sqlite hosts keying material …
- 00:07 PDNSSEC edited by
- (diff)
01/02/11:
- 22:50 Changeset [1795] by
- add some primitive locking to the rrsig cache, plus clarify some logging …
- 22:49 Changeset [1794] by
- add the code to add the new fields to the sqlite3 sql schema
- 22:48 Changeset [1793] by
- make pdnssec read the right configuration file, plus make add-zone-key add …
- 22:32 Changeset [1792] by
- turns out that there is a tiny chance we crash on setting the …
- 20:40 Changeset [1791] by
- hook up activate-domain-key, deactivate-domain-key, remove-domain-key
- 19:34 Changeset [1790] by
- move around a lot of stuff to isolate dnssec db connectivity fix up …
- 19:31 Changeset [1789] by
- move SOA serialization code away from dnspacket into generic dns.cc file, …
- 19:30 Changeset [1788] by
- add import-zone-key for interop, remove key-repository setting from …
- 19:28 Changeset [1787] by
- pare down zone2sql/zone2ldap dependencies so they don't depend on a …
01/01/11:
- 22:25 Changeset [1786] by
- some helpful migration sql statements - still quite brief
- 22:23 Changeset [1785] by
- move some more stuff to the 'infra' and away from the 'keeper'
- 22:22 Changeset [1784] by
- bye bye directory based dnssec key repo
- 22:21 Changeset [1783] by
- don't crash if the dnsseckeeper returns unexpected results
- 22:20 Changeset [1782] by
- actually compile the dbdnsseckeeper into the binaries
- 22:19 Changeset [1781] by
- hook up the dbdnsseckeeper to everything, implement (most) methods in the …
- 21:26 Changeset [1780] by
- enable sqlite3 as a dnssec backend - especially useful as key storage for …
12/31/10:
- 14:39 Changeset [1779] by
- in preparation for database storage of keys, move out some infrastructure …
- 14:31 Changeset [1778] by
- repair some tabdamage
12/30/10:
- 22:45 Changeset [1777] by
- fix up export-zone-key so that we set the algorithm field correctly
- 22:22 Changeset [1776] by
- default init last_changed in dnsresource records, finally shutting up …
- 22:22 Changeset [1775] by
- also fix up the signing of the SOA in noerror responses
- 22:20 Changeset [1774] by
- stop bind backend from crashing on domains that are not found, plus fix up …
- 20:52 Changeset [1773] by
- spruce up 'show-zone' output, add 'set-nsec3', 'unset-nsec3', …
- 15:48 Changeset [1772] by
- mark bind supermaster code as 'experimental'
- 15:47 Changeset [1771] by
- clone-zone got inception and expiration wrong, plus teach it to grab the …
- 15:41 Changeset [1770] by
- bindbackend can now do nsec3, gets at least some records right ;-)
- 15:40 Changeset [1769] by
- re-enable order-zone, make it nsec/nsec3 aware dnsseckeeper
- 15:39 Changeset [1768] by
- silence some debugging output, clarify some comments
- 15:39 Changeset [1767] by
- lowercase the nsec3 output (hurts the eyes less, plus identical to nsd), …
12/29/10:
- 11:23 Ticket #332 (--start-id not respected when --zone is passed and named.conf not used in ...) created by
- The sample command: zone2sql --start-id=10 …
- 09:58 Changeset [1766] by
- our 'throttle' code would do one final 'throttle' long after the time …
Note: See TracTimeline
for information about the timeline view.
